From 270597e8706aead70607fbed0a78366ed9c2b3c5 Mon Sep 17 00:00:00 2001
From: Shahab Dogar <shahab@dogar.dev>
Date: Sun, 2 Feb 2025 17:10:47 +0500
Subject: [PATCH] feat: add user password with sops encryption

---
 .sops.yaml   |  7 +++++++
 secrets.yaml | 21 +++++++++++++++++++++
 2 files changed, 28 insertions(+)
 create mode 100644 .sops.yaml
 create mode 100644 secrets.yaml

diff --git a/.sops.yaml b/.sops.yaml
new file mode 100644
index 0000000..c5c46f5
--- /dev/null
+++ b/.sops.yaml
@@ -0,0 +1,7 @@
+keys:
+  - &shahab age1nywqskjvafmp77nqqfg0vxufj95zwedl4alr9afdgltdq4sfupgswmtuqf
+creation_rules:
+  - path_regex: secrets.yaml$
+    key_groups:
+    - age:
+      - *shahab
diff --git a/secrets.yaml b/secrets.yaml
new file mode 100644
index 0000000..252b502
--- /dev/null
+++ b/secrets.yaml
@@ -0,0 +1,21 @@
+shahab_passwd: ENC[AES256_GCM,data:qF+S0Y3BsmGwB+kcQpORLIAt51CnG5SiZpWItB4srNe2Bv+H9AZkmQ6ycZxIDaYud86SiINqBUoOzmki4d/zzRXXFZvSR8gNag==,iv:Kznp80algOFzzd2TD8nz/cdmjRjW5DEazms53c69DPA=,tag:QNL7viM3tBNjiTivIFeocw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1nywqskjvafmp77nqqfg0vxufj95zwedl4alr9afdgltdq4sfupgswmtuqf
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVFlCb1pHSzNtMzgvcUdk
+            TG0wNlBwKzN2cUxzdllITTdrcEtPSFAwQkE4CjE1Szh4a2dYMXBHeUVOWVZ4d2xy
+            Yk5rbWhMN1hwcW81WWN1K0EveHRYQzgKLS0tIFlzQlJBSExYYlo1M3pnejM0azgz
+            K3VaaFFqQXR2M1ZhcUdJeGlUS2VHTXMKLlQ1GuC/K+pACo1ouQoZI2dU0zUxWQfC
+            poZwpHWm4fvES758roeQZ/NiH5E+UDtjGhxQSenqbmwvd54SeTeBVw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-02-02T12:09:53Z"
+    mac: ENC[AES256_GCM,data:NCOvVkWUQRgbesxo0F3eHvQAp7PF8U4/yFxwYYV5T6ZcgOrgvvDm185k85dLrDxEaipHUuNeEHsdlbkPCDHwznGaNY8rEmZfXPVUTvpkX1rhXcVIM41nnDxmg0A8cLNT2HWX/M4OFfwai2jPdZlkixuSAk9BzrNm5AEJQPu8mFw=,iv:/uPh8IxqncoQdlTO5xXG7vBMV9V//SEajs/sE/gRnmg=,tag:t8q1YElhvE6Z2AZLehb7/w==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.1